Windows File Explorer Driver Privilege Escalation

The vulnerability of the Windows File Explorer in Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges by sending a specially created malicious file...

CVE-2025-62565 Windows File Explorer Elevation of Privilege Vulnerability

...

CVE-2025-62565

CVE-2025-62565 is a Windows Shell elevation-of-privilege vulnerability caused by a use-after-free in Windows Shell. A locally authenticated attacker can exploit it to elevate privileges; CVSSv3.1 base score 7.3 (HIGH) with LOCAL attack vector, LOW attack complexity, LOW privileges required, and U...

CVE-2025-62565 Windows File Explorer Elevation of Privilege Vulnerability

...

CVE-2025-64658 Windows File Explorer Elevation of Privilege Vulnerability

...

CVE-2025-64658 Windows File Explorer Elevation of Privilege Vulnerability

...

CVE-2025-64658

CVE-2025-64658 is a Windows Shell elevation-of-privilege vulnerability described as a race condition caused by concurrent execution using a shared resource. The available connected documents confirm impact as local privilege escalation for an attacker with local access and low privileges, requiri...

Windows File Explorer Elevation of Privilege Vulnerability

Use after free in Windows Shell allows an authorized attacker to elevate privileges locally...

Windows File Explorer Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Shell allows an authorized attacker to elevate privileges locally...

📄 Microsoft Windows File Explorer NTLM Hash Disclosure

Microsoft Windows File Explorer in Windows 10 and 11 contains a critical NTLM hash disclosure vulnerability that allows attackers to capture user authentication credentials by exploiting the automatic parsing of .library-ms files from ZIP archives, leading to potential domain compromise through...

Exploit for External Control of File Name or Path in Microsoft

CVE-2025-2405...

November 20, 2025—KB5070312 (OS Build 22631.6276) Preview

None None...

Microsoft Windows File Explorer Spoofing Vulnerability (CNVD-2026-10676)

Microsoft Windows File Explorer is a file manager application from Microsoft USA. A spoofing vulnerability exists in Microsoft Windows File Explorer that is caused by the exposure of sensitive information to unauthorized participants in File Explorer. An attacker could exploit the vulnerability t...

Windows File Explorer Driver Spoofing

The vulnerability of the Windows File Explorer in Windows operating systems is related to insufficient protection of sensitive data. Exploiting this vulnerability allows a remote attacker to perform spoofing attacks...

Windows File Explorer Driver Spoofing

The vulnerability of the Windows File Explorer in Windows operating systems is related to insufficient protection of sensitive data. Exploiting this vulnerability allows a remote attacker to perform spoofing attacks...

CVE-2025-58739

Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an unauthorized attacker to perform spoofing over a network...

CVE-2025-59214

Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an unauthorized attacker to perform spoofing over a network...

EUVD-2025-34288

Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an unauthorized attacker to perform spoofing over a network...

EUVD-2025-34306

Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an unauthorized attacker to perform spoofing over a network...

CVE-2025-59214

Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an unauthorized attacker to perform spoofing over a network...